$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/2456905e-d28e-3e56-a7d3-be5dec56d5a0.roa File: 2456905e-d28e-3e56-a7d3-be5dec56d5a0.roa (raw, json) Hash identifier: wDBqZ3+yptFXshBc7Lxnmtinj9d9fvbK/pLjiYY/pF8= Subject key identifier: 8C:EB:E3:9B:D4:B3:9F:FD:2D:DE:43:04:B5:B6:4C:92:C7:46:0B:12 Certificate issuer: /CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Certificate serial: 010D0C9F4328584B0E4168178202F528F45B7A80 Authority key identifier: BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/2456905e-d28e-3e56-a7d3-be5dec56d5a0.roa Signing time: Tue 02 Sep 2025 01:00:32 +0000 ROA not before: Tue 02 Sep 2025 01:00:32 +0000 ROA not after: Mon 01 Dec 2025 02:00:32 +0000 asID: 9304 IP address blocks: 216.83.46.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0e:41:68:17:82:02:f5:28:f4:5b:7a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Validity Not Before: Sep 2 01:00:32 2025 GMT Not After : Dec 1 02:00:32 2025 GMT Subject: CN=a4127e27-558e-4a2d-b2ac-0bd7a5010966 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:d7:8d:3c:32:77:88:54:2c:91:74:d3:13:86: 86:cf:e7:1a:72:d8:65:22:b1:a1:57:e0:18:ab:39: 2b:77:bf:4b:ba:b0:b8:c4:b8:4d:d2:3b:4e:d3:20: 9d:86:50:d5:b3:47:aa:0f:f0:37:34:b9:fe:f5:2a: 95:64:77:1e:92:6a:de:cc:9e:94:cc:16:f5:d4:33: 3a:7c:96:dd:58:29:d9:e5:ff:ec:7d:fd:be:8e:d9: 6b:27:b1:09:8b:68:8e:fa:e2:bf:2a:49:d2:3c:d0: 5d:a3:3a:07:65:75:aa:fe:59:f0:df:f2:0b:51:f5: 14:c5:46:21:ad:1e:3a:b7:c6:38:ea:5f:0e:64:d7: f6:0d:e3:1b:9c:82:72:af:e7:48:a8:09:cc:e9:83: 2d:c1:17:18:05:58:8d:80:dc:e4:77:c4:bc:dc:58: b6:1d:49:4e:58:f8:a4:37:9c:f5:f3:92:63:73:53: 08:81:2b:f6:bc:61:8d:30:e1:9d:ba:be:11:af:dc: 28:9b:52:0d:a6:36:72:79:c0:c8:c6:24:a7:0f:2d: 8c:49:43:75:38:94:6a:5f:94:82:10:29:6a:ba:5d: 58:41:28:af:ae:50:2e:0a:05:77:eb:31:7f:28:6a: e0:93:fa:32:dc:2f:18:4f:4b:fb:1c:b5:b7:c8:44: 70:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:EB:E3:9B:D4:B3:9F:FD:2D:DE:43:04:B5:B6:4C:92:C7:46:0B:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/2456905e-d28e-3e56-a7d3-be5dec56d5a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl X509v3 Authority Key Identifier: keyid:BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer sbgp-ipAddrBlock: critical IPv4: 216.83.46.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:d1:39:cb:08:3f:9d:24:5e:06:9a:5d:53:14:c2:31:a9:67: 00:60:05:d5:84:7b:f8:7c:55:ff:30:d0:57:3d:8a:8f:97:d3: 72:b1:f3:2b:0a:e0:44:c4:34:47:eb:7f:05:74:85:cd:eb:93: af:ab:03:c7:5e:4c:0b:42:1c:c8:5f:91:46:dc:49:2c:17:b1: 7b:91:98:d4:df:2e:ba:f5:09:37:79:f3:03:de:6f:4d:66:79: e7:23:64:85:ff:a5:7d:45:7a:49:ac:1c:3b:86:d4:b6:9d:13: a4:9b:d0:e9:6b:e2:ec:e2:13:8d:c4:70:fa:64:0f:19:42:38: 5c:1a:fb:b6:f5:fc:9c:43:08:0d:08:18:20:fa:70:36:af:7d: db:3c:4d:1b:aa:12:3d:d4:a8:a8:5c:5c:a1:da:3c:66:33:30: b3:5b:7d:9f:db:57:73:e3:3c:69:14:10:ca:dd:a0:ce:65:ef: 22:88:55:ea:aa:2d:15:0d:3d:a7:f1:ea:35:67:52:78:a7:f7: cf:bc:3a:32:3d:01:78:a8:11:43:39:4f:67:fa:b3:32:db:b7: ae:c2:07:13:67:b0:3c:d7:62:f7:93:0c:86:9b:11:a0:f0:82: 29:82:fa:e7:9c:32:49:e0:2a:6c:d6:3b:25:d2:1d:69:ee:dd: c2:d2:3c:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsOQWgXggL1KPRbeoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmY2NDc1ZjEtYjUyZS00Yzg2LThkMjAtMTg4NzUxYzM1 MGU4MB4XDTI1MDkwMjAxMDAzMloXDTI1MTIwMTAyMDAzMlowLzEtMCsGA1UEAxMk YTQxMjdlMjctNTU4ZS00YTJkLWIyYWMtMGJkN2E1MDEwOTY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgNeNPDJ3iFQskXTTE4aGz+cacthlIrGhV+AY qzkrd79LurC4xLhN0jtO0yCdhlDVs0eqD/A3NLn+9SqVZHcekmrezJ6UzBb11DM6 fJbdWCnZ5f/sff2+jtlrJ7EJi2iO+uK/KknSPNBdozoHZXWq/lnw3/ILUfUUxUYh rR46t8Y46l8OZNf2DeMbnIJyr+dIqAnM6YMtwRcYBViNgNzkd8S83Fi2HUlOWPik N5z185Jjc1MIgSv2vGGNMOGdur4Rr9wom1INpjZyecDIxiSnDy2MSUN1OJRqX5SC EClqul1YQSivrlAuCgV36zF/KGrgk/oy3C8YT0v7HLW3yERw1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIzr45vUs5/9Ld5DBLW2TJLHRgsSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0 NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3NTFjMzUwZTgvMjQ1NjkwNWUtZDI4ZS0z ZTU2LWE3ZDMtYmU1ZGVjNTZkNWEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZmY2NDc1ZjEtYjUyZS00Yzg2LThk MjAtMTg4NzUxYzM1MGU4L2ZmNjQ3NWYxLWI1MmUtNGM4Ni04ZDIwLTE4ODc1MWMz NTBlOC5jcmwwHwYDVR0jBBgwFoAUvOAkHgeesZWSI9MoKtY8CSTCO4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3 NTFjMzUwZTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2FMuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHnROcsIP50kXgaaXVMUwjGpZwBgBdWEe/h8Vf8w0Fc9io+X03Kx8ysK 4ETENEfrfwV0hc3rk6+rA8deTAtCHMhfkUbcSSwXsXuRmNTfLrr1CTd58wPeb01m eecjZIX/pX1FekmsHDuG1LadE6Sb0Olr4uziE43EcPpkDxlCOFwa+7b1/JxDCA0I GCD6cDavfds8TRuqEj3UqKhcXKHaPGYzMLNbfZ/bV3PjPGkUEMrdoM5l7yKIVeqq LRUNPafx6jVnUnin98+8OjI9AXioEUM5T2f6szLbt67CBxNnsDzXYveTDIabEaDw gimC+uecMkngKmzWOyXSHWnu3cLSPGY= -----END CERTIFICATE-----Generated at Wed Nov 5 18:03:41 2025 by rpki-client